Skip to content
OpenAdvisories

Vendor

elixir-grpc

5 known vulnerabilities.

Products

grpc 4 grpc_server 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2026-71397

    Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server

    Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust memory and crash the node via an oversized client-streaming or bidirectional-streaming request body. The streaming read c…

    elixir-grpc grpc_server grpc_server Hex
  • High 8.7
    CVE-2026-53430

    grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzip decompression bomb. This vulnerability is associated with program files lib/g…

    elixir-grpc grpc grpc Hex
  • High 7.6
    CVE-2026-48599

    Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding

    Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the query string or request …

    elixir-grpc grpc grpc Hex
  • High 8.7
    CVE-2026-48854

    Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc

    Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streaming a large or slow-trickle unary request body. 'Elixir.GRPC.Server.Adapters.Cow…

    elixir-grpc grpc grpc Hex